$ rpki-client -vvf rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft File: 5ABFE157E467A6732384B658909A9764D5D88AEC.mft (raw, json) Hash identifier: On47RblNiEzpUxfjppwUIoY8stCBK+//JpkAa5O/V88= Subject key identifier: 7F:6B:A9:4B:BF:2A:FC:CB:42:1A:A4:D7:37:FF:29:8E:5C:51:D4:83 Authority key identifier: 5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC Certificate issuer: /CN=5ABFE157E467A6732384B658909A9764D5D88AEC Certificate serial: 1CDBF06CC9FD0AD6C7B53294D4960B22A8115E19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:36:23 +0000 Manifest this update: Thu 23 Jul 2026 21:31:23 +0000 Manifest next update: Fri 24 Jul 2026 22:38:23 +0000 Files and hashes: 1: 5ABFE157E467A6732384B658909A9764D5D88AEC.crl (hash: 6GM6IIj83C6xqQeMoWlWzzQTMb/tbTOhgpNbEA5RGwU=) 2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: OYkbzaiaQarKQmGzbsa0kcIv0ahbBNrL8RA56NXr+2g=) 3: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: s1c5Xhjj1A4MpzLQqmtjwYb0lHUpDy9QxtX6cd6J7tw=) 4: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: WFBdDzYNGyGBPxFeYXB5Lb1GK9i9G1iuTrrdeZuMZkY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:db:f0:6c:c9:fd:0a:d6:c7:b5:32:94:d4:96:0b:22:a8:11:5e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ABFE157E467A6732384B658909A9764D5D88AEC Validity Not Before: Jul 23 21:31:23 2026 GMT Not After : Jul 24 22:38:23 2026 GMT Subject: CN=7F6BA94BBF2AFCCB421AA4D737FF298E5C51D483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f4:c2:dc:c9:f2:20:52:de:66:b5:09:bc:a4: ed:40:e1:69:5e:8e:eb:6d:4d:57:69:53:03:ae:d0: 1e:89:b3:bd:7b:6f:7c:c3:37:aa:96:0e:d4:30:90: a1:9f:2f:c1:c5:de:f5:1e:0e:4b:8e:97:86:4f:3d: 01:2d:92:27:60:b1:ae:1d:5b:94:87:3d:90:25:d8: 02:5c:48:d4:d7:6d:12:06:3e:aa:a9:83:e2:04:41: db:00:6f:49:b8:2b:9a:a6:98:2e:49:27:9d:76:4d: e8:9d:79:46:39:be:87:69:97:cd:0d:15:50:9c:cd: 03:4d:b5:f0:60:85:de:9f:48:d5:f6:3c:67:07:cf: 65:7b:a1:36:64:b0:38:6f:b7:09:17:c8:29:ea:ad: b9:34:da:1e:24:4c:46:2c:e7:56:6c:5a:18:fa:e3: 87:33:fa:6f:67:d6:c4:e3:7f:e4:bb:62:16:2a:cf: ad:2a:76:5e:67:c4:01:58:60:2f:53:18:b4:20:b8: 71:79:62:5c:1e:6d:58:0c:d9:2d:f4:2c:de:25:b3: a6:53:2b:95:00:b8:55:d6:23:f9:c9:36:f5:4e:dc: 6b:6a:fd:91:09:55:03:e1:66:e5:aa:d5:87:08:dd: d1:02:fc:16:91:47:36:dd:cf:5e:ea:dc:91:7d:33: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6B:A9:4B:BF:2A:FC:CB:42:1A:A4:D7:37:FF:29:8E:5C:51:D4:83 X509v3 Authority Key Identifier: keyid:5A:BF:E1:57:E4:67:A6:73:23:84:B6:58:90:9A:97:64:D5:D8:8A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5ABFE157E467A6732384B658909A9764D5D88AEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/5ABFE157E467A6732384B658909A9764D5D88AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:dc:52:90:87:5b:dd:f8:e5:87:a8:bf:ec:5c:e0:80:9f:50: 63:f5:6c:34:c5:f3:cc:55:d3:b8:b4:8a:f0:9b:0d:88:1b:96: de:4f:52:49:6b:08:48:91:61:7e:fe:80:29:ca:5a:36:fd:1d: 63:cb:d2:fe:7a:50:f3:cb:4a:d2:0b:22:3c:e0:da:c6:8b:5b: b9:88:70:d1:d4:a4:9a:d9:d2:f9:cc:0b:70:f9:f1:35:a6:7f: 48:67:8d:be:ea:86:d7:a7:c1:93:c8:fe:5d:87:28:3c:57:b1: d4:74:15:03:70:96:a4:f5:9e:32:16:59:52:e4:8e:77:a1:7e: 28:e8:f0:b8:85:9c:07:77:b5:15:6e:19:d4:9e:c2:6d:e2:22: 8f:0b:81:ff:df:05:e5:10:de:52:36:b0:fc:67:5d:48:82:67: 8d:02:05:57:79:a7:fb:8f:25:95:b0:60:81:73:87:21:c0:ba: 04:a7:fb:a6:7e:4f:74:db:17:34:c3:1d:98:2b:7c:10:1a:60: 76:1c:a3:5a:79:a6:b6:fe:76:ab:1a:74:13:fb:42:50:ed:fe: 83:5a:e3:ca:16:42:68:20:5e:58:aa:30:d1:f4:bd:6b:56:32: 01:f9:8b:ec:30:66:01:ca:90:d3:38:fe:0a:d4:b1:7b:9e:95: ea:5e:ee:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNvwbMn9CtbHtTKU1JYLIqgRXhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3NjRE NUQ4OEFFQzAeFw0yNjA3MjMyMTMxMjNaFw0yNjA3MjQyMjM4MjNaMDMxMTAvBgNV BAMTKDdGNkJBOTRCQkYyQUZDQ0I0MjFBQTRENzM3RkYyOThFNUM1MUQ0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9MLcyfIgUt5mtQm8pO1A4Wle juttTVdpUwOu0B6Js717b3zDN6qWDtQwkKGfL8HF3vUeDkuOl4ZPPQEtkidgsa4d W5SHPZAl2AJcSNTXbRIGPqqpg+IEQdsAb0m4K5qmmC5JJ512TeideUY5vodpl80N FVCczQNNtfBghd6fSNX2PGcHz2V7oTZksDhvtwkXyCnqrbk02h4kTEYs51ZsWhj6 44cz+m9n1sTjf+S7YhYqz60qdl5nxAFYYC9TGLQguHF5YlwebVgM2S30LN4ls6ZT K5UAuFXWI/nJNvVO3Gtq/ZEJVQPhZuWq1YcI3dEC/BaRRzbdz17q3JF9M941AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf2upS78q/MtCGqTXN/8pjlxR1IMwHwYDVR0j BBgwFoAUWr/hV+RnpnMjhLZYkJqXZNXYiuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmJkMzA1ODctYTdjYS00MTk1LWEzNTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdF NDY3QTY3MzIzODRCNjU4OTA5QTk3NjRENUQ4OEFFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81QUJGRTE1N0U0NjdBNjczMjM4NEI2NTg5MDlBOTc2NEQ1RDg4 QUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNUFCRkUxNTdFNDY3QTY3MzIzODRCNjU4OTA5QTk3 NjRENUQ4OEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANXcUpCHW9345Yeov+xc4ICfUGP1bDTF88xV 07i0ivCbDYgblt5PUklrCEiRYX7+gCnKWjb9HWPL0v56UPPLStILIjzg2saLW7mI cNHUpJrZ0vnMC3D58TWmf0hnjb7qhtenwZPI/l2HKDxXsdR0FQNwlqT1njIWWVLk jnehfijo8LiFnAd3tRVuGdSewm3iIo8Lgf/fBeUQ3lI2sPxnXUiCZ40CBVd5p/uP JZWwYIFzhyHAugSn+6Z+T3TbFzTDHZgrfBAaYHYco1p5prb+dqsadBP7QlDt/oNa 48oWQmggXliqMNH0vWtWMgH5i+wwZgHKkNM4/grUsXuelepe7hY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:15:26 2026 by rpki-client